Fix long standing RNG bug [CVE-2016-6313]